Thanks @vaib25vicky for reporting this vulnerability through our HackerOne bug bounty program

3 vulnerability records and advisories credit this contributor.